V-271299
Microsoft SQL Server 2022 Instance Security Technical Implementation Guide
Title
Access to linked servers must be disabled or restricted, unless specifically required and approved.
Description
<VulnDiscussion>Information systems are capable of providing a wide variety of functions and services. Some of the default functions and services may not be necessary to support essential organizational operations (e.g., key missions, functions). It is detrimental for applications to provide, or install by default, functionality exceeding requirements or mission objectives. Applications must adhere to the principles of least functionality by providing only essential capabilities. SQL Serve...
Fix Text (Documentation Requirement)
Remove any linked servers and all associated logins that are not authorized. To remove a linked server and all associated logins run the following: sp_dropserver 'LinkedServerName', 'droplogins'; To remove a login from a linked server run the following: EXEC sp_droplinkedsrvlogin 'LoginName', NULL;